PT-2022-6238 · Linux+8 · Linux Kernel+8

Dmitry Vyukov · Published 2022-10-18 · Updated 2024-02-27 · CVE-2023-0590

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A use-after-free flaw was found in qdisc graft in net/sched/sch api.c in the Linux Kernel due to a race problem. This flaw leads to a denial of service issue. The issue can be exploited to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2023:2148

ALSA-2023:2458

ALSA-2023:7077

ALT-PU-2022-3364

ALT-PU-2022-3371

ALT-PU-2023-1023

ALT-PU-2023-1064

ALT-PU-2023-1342

ALT-PU-2023-1684

ALT-PU-2023-1741

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-25739

BDU:2023-00626

CESA-2023_6901

CESA-2023_7077

CVE-2023-0590

DLA-3710-1

OESA-2023-1084

OESA-2023-1109

OPENSUSE-SU-2023_0433-1

OPENSUSE-SU-2023_0488-1

OPENSUSE-SU-2023_0774-1

OPENSUSE-SU-2023_2646-1

OPENSUSE-SU-2023_2871-1

RHSA-2023:2148

RHSA-2023:2458

RHSA-2023:5627

RHSA-2023:6901

RHSA-2023:7077

RHSA-2023:7382

RHSA-2023:7389

RHSA-2023_2148

RHSA-2023_2458

RHSA-2023_6901

RHSA-2023_7077

SUSE-SU-2023:0433-1

SUSE-SU-2023:0485-1

SUSE-SU-2023:0488-1

SUSE-SU-2023:0618-1

SUSE-SU-2023:0634-1

SUSE-SU-2023:0767-1

SUSE-SU-2023:0768-1

SUSE-SU-2023:0774-1

SUSE-SU-2023:0778-1

SUSE-SU-2023:0779-1

SUSE-SU-2023:0780-1

SUSE-SU-2023:0852-1

SUSE-SU-2023:1608-1

SUSE-SU-2023:1801-1

SUSE-SU-2023:1803-1

SUSE-SU-2023:1848-1

SUSE-SU-2023:1971-1

SUSE-SU-2023:1973-1

SUSE-SU-2023:1975-1

SUSE-SU-2023:1982-1

SUSE-SU-2023:1983-1

SUSE-SU-2023:1995-1

SUSE-SU-2023:2007-1

SUSE-SU-2023:2009-1

SUSE-SU-2023:2023-1

SUSE-SU-2023:2024-1

SUSE-SU-2023:2031-1

SUSE-SU-2023:2035-1

SUSE-SU-2023:2043-1

SUSE-SU-2023:2232-1

SUSE-SU-2023:2506-1

SUSE-SU-2023:2646-1

SUSE-SU-2023:2805-1

SUSE-SU-2023:2809-1

SUSE-SU-2023:2871-1

USN-5850-1

USN-5851-1

USN-5860-1

USN-5876-1

USN-5877-1

USN-5878-1

USN-5879-1

USN-6284-1

USN-6301-1

USN-6312-1

USN-6314-1

USN-6331-1

USN-6337-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linux Kernel

Linuxmint

Red Hat

Suse

Ubuntu

References · 1076

• https://osv.dev/vulnerability/USN-6301-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0779-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-20593 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2023-2458.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0618-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-4378 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-2194 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-0590 · Security Note
• https://ubuntu.com/security/CVE-2022-3586 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-0590 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6312-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0768-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6337-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-3609 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0634-1 · Vendor Advisory